CVE-2023-52568

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race The SGX EPC reclaimer (ksgxd) may reclaim the SECS EPC page for an enclave and set secs.epc_page to NULL. The SECS page is used for EAUG and ELDU in the SGX page fault handler. However, the NULL check for secs.epc_page is only done for ELDU, not EAUG before being used. Fix this by doing the same NULL check and reloading of the SECS page as needed for both EAUG and ELDU. The SECS page holds global enclave metadata. It can only be reclaimed when there are no other enclave pages remaining. At that point, virtually nothing can be done with the enclave until the SECS page is paged back in. An enclave can not run nor generate page faults without a resident SECS page. But it is still possible for a #PF for a non-SECS page to race with paging out the SECS page: when the last resident non-SECS page A triggers a #PF in a non-resident page B, and then page A and the SECS both are paged out before the #PF on B is handled. Hitting this bug requires that race triggered with a #PF for EAUG. Following is a trace when it happens. BUG: kernel NULL pointer dereference, address: 0000000000000000 RIP: 0010:sgx_encl_eaug_page+0xc7/0x210 Call Trace: ? __kmem_cache_alloc_node+0x16a/0x440 ? xa_load+0x6e/0xa0 sgx_vma_fault+0x119/0x230 __do_fault+0x36/0x140 do_fault+0x12f/0x400 __handle_mm_fault+0x728/0x1110 handle_mm_fault+0x105/0x310 do_user_addr_fault+0x1ee/0x750 ? __this_cpu_preempt_check+0x13/0x20 exc_page_fault+0x76/0x180 asm_exc_page_fault+0x27/0x30

• CWE-476

• https://git.kernel.org/stable/c/1348f7f15d7c7798456856bee74a4235c2da994ePatch
• https://git.kernel.org/stable/c/811ba2ef0cb6402672e64ba1419d6ef95aa3405dPatch
• https://git.kernel.org/stable/c/c6c2adcba50c2622ed25ba5d5e7f05f584711358Patch
• https://git.kernel.org/stable/c/1348f7f15d7c7798456856bee74a4235c2da994ePatch
• https://git.kernel.org/stable/c/811ba2ef0cb6402672e64ba1419d6ef95aa3405dPatch
• https://git.kernel.org/stable/c/c6c2adcba50c2622ed25ba5d5e7f05f584711358Patch

Published

Mar 2, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52562In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52563In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52564In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52565In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2023-52566In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52567In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52569In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-5257A vulnerability was found in WhiteHSBG JNDIExploit 1.4 on Wi…5.7
• CVE-2023-52570In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52571In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2023-52572In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52573In the Linux kernel, the following vulnerability has been re…5.5